cobaltstrike | 62c7ccfc840d306790f6b2f12a81d8a09818af7355bcb613fb0fa6fd9962799a | Triage

Sharing

General

Target

62c7ccfc840d306790f6b2f12a81d8a09818af7355bcb613fb0fa6fd9962799a
Size

517KB
Sample

240915-lln4csxfkl
MD5

e98837dfb85907265f13f2958a2b0a5e
SHA1

fd90f3d6068c91cecc9add0ada785634f8018af1
SHA256

62c7ccfc840d306790f6b2f12a81d8a09818af7355bcb613fb0fa6fd9962799a
SHA512

7ac6100bef26eca1778109ba79fa8b7681e8c46d335a320decf070d774997c2cbf71ba9aa5feb6342a4e07c9f1ed084324af663345aba21e220a4f34d8a7cd90
SSDEEP

12288:JlUJ2Y7AVP4aBsfbSczf8UJ+7k5Jn9uoSsY4:33Y7AVPPBsf+xUJ4k5R9uZA

Score

10^/10

cobaltstrike backdoor discovery trojan

Malware Config

Targets

- Target
  
  62c7ccfc840d306790f6b2f12a81d8a09818af7355bcb613fb0fa6fd9962799a
- Size
  
  517KB
- MD5
  
  e98837dfb85907265f13f2958a2b0a5e
- SHA1
  
  fd90f3d6068c91cecc9add0ada785634f8018af1
- SHA256
  
  62c7ccfc840d306790f6b2f12a81d8a09818af7355bcb613fb0fa6fd9962799a
- SHA512
  
  7ac6100bef26eca1778109ba79fa8b7681e8c46d335a320decf070d774997c2cbf71ba9aa5feb6342a4e07c9f1ed084324af663345aba21e220a4f34d8a7cd90
- SSDEEP
  
  12288:JlUJ2Y7AVP4aBsfbSczf8UJ+7k5Jn9uoSsY4:33Y7AVPPBsf+xUJ4k5R9uZA
Score

10^/10

cobaltstrike backdoor discovery trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

cobaltstrikebackdoordiscoverytrojan

behavioral2

cobaltstrikebackdoordiscoverytrojan